Feb 17, 2009

Attack on DNS servers

My DNS in under attack for two weeks already. This comes from the IP address daily several times per second:

Feb 17 19:44:32 angel named[14025]: client 62.109.4.89#8639: query (cache) './NS/IN' denied
Feb 17 19:44:35 angel named[14025]: client 62.109.4.89#49699: query (cache) './NS/IN' denied
Feb 17 19:44:35 angel named[14025]: client 62.109.4.89#45419: query (cache) './NS/IN' denied
Feb 17 19:44:38 angel named[14025]: client 62.109.4.89#49667: query (cache) './NS/IN' denied
Feb 17 19:44:38 angel named[14025]: client 62.109.4.89#56759: query (cache) './NS/IN' denied
Feb 17 19:44:42 angel named[14025]: client 62.109.4.89#11347: query (cache) './NS/IN' denied
Feb 17 19:44:42 angel named[14025]: client 62.109.4.89#58937: query (cache) './NS/IN' denied
Feb 17 19:44:44 angel named[14025]: client 62.109.4.89#45638: query (cache) './NS/IN' denied
Feb 17 19:44:44 angel named[14025]: client 62.109.4.89#35305: query (cache) './NS/IN' denied
Feb 17 19:44:48 angel named[14025]: client 62.109.4.89#1079: query (cache) './NS/IN' denied
Feb 17 19:44:48 angel named[14025]: client 62.109.4.89#58384: query (cache) './NS/IN' denied


I ban it and next day it comes from another unrelated address. Stupid and contr–productive.

No comments:

Post a Comment